// ValtersIT API

Query it from code.
Or run it yourself.

EU-hosted. Official sources only, synced hourly. No tracking, minimal data.
One CVE and Threat-IP dataset — two ways to use it.

Get an API key → Run a scanner →

$ curl -H "Authorization: Bearer $KEY" \

"https://api.valtersit.com/api/v1/cve/CVE-2024-3094"

# response (trimmed)

{

"cve_id": "CVE-2024-3094",

"vendor": "XZ Utils",

"cvss_score": 10.0,

"patch_status": "PATCHED / FIX AVAILABLE",

"cisa_kev": "TRUE",

"poc_status": "Public"

}

192,642+ CVE records

419,703+ IPs in threat feed

€0.08 per credit, no minimum

40+ upstream sources

1 h sync interval

// two_ways

Two ways to use the same dataset.

API access

Query from your code

Query CVEs and the Threat-IP feed from your own code. For SIEM integrations, dashboards, CI pipelines and custom tooling. Structured JSON, no rate-throttling surprises.

GET /api/v1/cve/{id}
GET /api/v1/ip/feed
filter: vendor · severity · CVSS · changed-since

Read the API docs → See API pricing →

Scanner scripts

Run on your own systems

Open-source scanners you clone and run locally — WordPress, Linux, Docker, Windows, and firewall blocklists. Your data stays on your machine; only vendor + product + version is checked against the API.

wordpress-cve-scanner
linux-cve-scanner
docker-cve-scanner
windows-cve-scanner

Browse the scanners → See scanner pricing →

// how_it_works

API path

Get an API key

Call an endpoint

GET /api/v1/cve/{id} or /api/v1/ip/feed — header, JSON out.

Get structured JSON

CVSS, EPSS, KEV, exploit status, MITRE ATT&CK, patch state, Shodan dorks — all in one response.

Scanner path

Clone the script

Open-source, Apache-2.0. Read every line before you run it.

Set your key and run

One env var, one command. Cron it for nightly scans.

Get matched CVEs + a report

Download the report free for 30 days after each scan.

Privacy guarantee: The scanner never sends file contents, source code, hostnames, IPs or credentials. Only vendor + product + version leaves the machine.

// why_this_data

Honesty as a feature.

Official sources, cited.

Every CVE, IP and vendor record comes from official advisories — NVD, CISA, vendor sources — linked, not scraped guesses. How we collect data →

We report what's still unpatched — even when it's quiet.

If official sources list a vulnerability as unfixed, we show it as unfixed. We don't soften data to please anyone.

EU-hosted, minimal data.

Servers in the EU (Hetzner). No tracking, no ads, no data sold. Your query IP is not stored by the scanner — only web and account actions log IPs where legally required.

Run by a named engineer, not a faceless vendor.

Built and maintained by one person. Meet Hugo →

// pricing_summary

Both products. One account.

API

PAYG €0.08 / credit

Standard €19/mo founding · reg. €29

+1 scanner system slot included

Pro €65/mo founding · reg. €99

+5 scanner system slots included

Full API pricing →

Scanners

PAYG €4 / system scan

Solo €8/mo founding · reg. €12

Team €29/mo founding · reg. €44

Agency €89/mo founding · reg. €135

Full scanner pricing →

Founding prices are locked for life while the subscription stays active — until 31.12.2026. Cancel or lapse and the founding rate is gone; any later subscription is at the then-current price.

25+ systems / enterprise onboarding: Talk to us →

// use_cases

Who uses it and how.

🌐

WordPress agency / freelancer

Scan every client site on a schedule. Catch a vulnerable plugin before it appears in an exploit kit — before a client calls at midnight.

🖥

MSP / IT team

One scanner across Linux servers, Docker hosts and Windows endpoints. Consistent CVE reports across the whole fleet, one account.

🔒

SOC / network team

Pull the Threat-IP feed straight into your firewall — nftables, ipset, pfSense, MikroTik. Updated daily, ~10,800 high-confidence IPs.

⚙️

Developers

Gate CI on critical CVEs. Query the API from your own dashboards. GET /api/v1/cve?vendor=nginx&cvss_min=9 — one call, structured JSON.

// faq

Common questions.

Do I need a separate scanner plan?

No — Standard includes 1 scanner system slot and Pro includes 5. Buy Solo/Team/Agency or add-on packs only if you need more slots, or want scanners without an API subscription. See scanner-only plans →

Are the scanner scripts really free?

Yes — open-source, Apache-2.0. Inspect and run them for nothing. You pay for the data matching and the report behind each scan, not for the script itself.

What data leaves my machine when I scan?

Only vendor, product and version identifiers. Never file contents, source code, hostnames, IP addresses or credentials. The scanner inventory is built locally; only the lookup query is sent.

Do you store my server's IP address?

No. The scanner sends no IP address. Web and account actions (login, checkout) log the request IP only where legally required — see Privacy Policy.

Can I cancel or get a refund?

This is a digital, instantly-accessible data product. By subscribing or purchasing credits you waive your EU right of withdrawal. Credits and subscription fees are non-refundable. Full details: Terms of Service · Refund Policy.

Is the founding price really locked for life?

Yes, for life, while the subscription stays active and paid. If you cancel or a payment lapses the founding rate is gone — any later subscription is charged at the price then in effect. The offer ends 31.12.2026.

Where is my data hosted?

EU servers (Hetzner). No data is sold or shared with third parties. No tracking, no ads.

Start with whichever fits.

API key for code and integrations. Scanner scripts for systems you manage directly. Same data, same account.